WO2002067494A1

WO2002067494A1 - Method and system for secured transmission of code keys and for the transmission of commands and data in data networks

Info

Publication number: WO2002067494A1
Application number: PCT/IB2002/000500
Authority: WO
Inventors: Hermann Stockburger
Original assignee: Stockburger, Andreas
Priority date: 2001-02-21
Filing date: 2002-02-19
Publication date: 2002-08-29

Abstract

In order to securely transmit code keys and data between a sender and an addressee in a public data network, the identity of the sender, i. e. biometrically generated data unequivocally identifying said sender and authentication data of the sender's subscriber system is used as provisional code key in a first interrogation of the sender. The authentication data of the addressee's subscriber system, optionally combined with his/her biometric data, is used as provisional code key for the reply of the addressee. A common transfer session key is generated by combination for the secured data transfer from both provisional code keys. To produce said transfer session key, system internal mutations can be carried in the combined provisional code keys.

Description

Method and system for secure coding key switching, as well as for command and data transmission in data networks.

The invention relates to a method for securely conveying a coding key between communication partners in a data network and for securely transmitting data and information in the data network. The invention also relates to a system for performing this method.

To protect their users and their applications, the modern, sometimes extensive and complex networking structures in the computer and telecommunications sector require comprehensive security against eavesdropping, misuse and the many other possibilities for criminal attacks. In particular, the spread of the Internet as a global telecommunications structure for everyone and the future mobile network in accordance with the UMTS standards with their multifunctional uses give this security need a decisive emphasis.

Technically and security-related, the systems mentioned relate to the areas of legally binding generation and the exchange of biometrically supported and linked electronic signatures via human / machine interfaces by the users personally, as well as the secure, uncompromising generation and transmission of a coding key between the Communication partners, for example in open data networks, such as the mobile radio network, and cryptographically securing the transmission of commands, data and information during the session in data and communication networks, such as on the Internet or in the mobile radio network, etc.

Known systems cannot provide the comprehensive security required for this, or at least not in a simple manner. The object of the invention is therefore to provide easy-to-use, simple means and methods for satisfying this security need.

According to the invention, this object is achieved by methods and systems with the features defined in the claims.

In the following an embodiment of the invention will be described with reference to the accompanying drawings. The drawing shows a diagram of a communication between two subscriber systems of a public network,

The typical situation for the use of the present invention shown in the drawing shows two subscriber systems 33 and 34 of an open system, which interactively communicate with one another temporarily during a session via public network 30, network node 31 and exchange 32. A subscriber system 33 acts as the sender of a message, for example an inquiry regarding a possible business relationship. In this phase, the other subscriber system 34 has the role of the addressee, ie the potential business partner requested. Both systems have the same structural structure of functional modules and are compatible with each other. They can be permanently installed stationary for a certain user group as human-machine interfaces, for example in connection with a personal computer or a host, or alternatively in portable human-machine interfaces, such as. As cell phones, smart cards, laptops, communicators, intelligent electronic locking systems, etc., are integrated and the functions of intelligent electronic documents, credentials, keys, etc. for computer and telecommunications systems, intelligent telemetry systems, as well as intelligent systems for remote diagnosis and remote maintenance or the command input and command acceptance, etc. perceive.

The subscriber system-side identification or verification of the system user, provided for the system access, including authentication of the electronic legitimation or systems used in this case, is carried out according to the methods described in CH Patent Applications No. 2150/00 and 2289/00, and WO 99/02047 , The spectrum of HF identification signals obtained, which represents the identity of this system and / or its user, is converted into a digital data record which is used in the area of cryptography, ie. H. is used for the secure generation and transmission of coding keys and then also in secure communication.

The mediation procedure proceeds as follows: A valid algorithm is determined centrally and made public.

The sender's mentioned digital data record is used as a provisional coding key for the first, yet non-binding contact is used and is also referred to as the primary session key. With this and the valid algorithm, the first, relatively insensitive data together with system-identifying and user-representative (biometric) data are encrypted in the central processing unit (CPU) of the subscriber system 33 to form a cryptogram 28.

The cryptogram 28 is passed together with a further data packet 29, which contains only non-critical content, such as address and sender etc. for the orientation of the addressee in plain text, to the subscriber system 34 of the communication partner via the public network 30, network node 31 and switch 32.

The cryptogram 28 received by the subscriber system 34 is temporarily stored in the system's central unit.

In parallel to this, a primary session key and a cryptogram 28 'are also generated in the subscriber system 34, as was previously the case in the subscriber system 33. However, this is formed from the addressee's data record and thus differs from the sender's primary session key in its content.

The cryptogram 28 'is then arithmetically assigned to the transmitted cryptogram 28, which cannot be decrypted by the subscriber system 34 without the primary session key of the sender that has not been deliberately transmitted. This creates a data network or term, which is used as a primary session key pair, consisting of the two cryptograms 28 'and 28 together with the agreed algorithm, in order to allow itself to be encrypted for the transfer into the subscriber system 33 , The primary session key pair in the form of the cryptograms 28 'and 28 is sent to the subscriber system 33 of the communication partner with a further data packet 29', which contains only non-critical content, such as address and sender, etc. for the orientation of the receiver system in plain text public network 30, network node 31 and switch 32 routed.

Upon completion of the response sequence, both communication partners have the same term, i.e. H. the same primary session key pair in the form of cryptograms 28 'and 28, which to a certain extent authenticate the corresponding physical individualities of the two subscriber systems 33 and 34, the biometric individualities of their system users and their further identity as a signature for future machine authorization checks.

It is important that, despite the data transfer over unprotected networks, the cryptograms cannot be compromised if it is assumed that the keys used have sufficient data, that the algorithms used are correspondingly resistant and that relevant data is intercepted and keys in plain text for session-specific cryptography - in particular in network 30 - are excluded according to the principle.

After these two sequences of contacting, both subscriber systems 33 and 34 are enabled by hardware and / or software, autonomously and synchronously, according to predetermined rules defined in the program, which are resident in them, from random, resulting during the operation Management variables, such as B. final digits of the terms, checksums and / or checksums, etc., which are absolutely not recorded by outside observers can and therefore remain secret to derive and carry out self-controlled, corresponding mutations 39 of the session key pair with the cryptograms 28 'and 28.

The particular advantage here is that these mutations 39 occur exclusively internally during the session in the subscriber systems 33, 34 and possibly all other systems involved in this open overall system and do not have to be transferred via the network with its listening options. It is also advantageous that this principle of the method can be refined and varied as required.

The result of such procedures is the so-called transfer session key 36, which is used jointly during the session in question for the transfer of the sensitive data to be protected and is then immediately deleted again for reasons of security.

The fact that both the measured values of the physical authentication procedure of the participant system used and the resulting measured values of the biometric person identification or verification are deliberately recorded as relative values instead of as absolute values and thus make a decisive contribution to the fact that from session to session, ie from Use to use the same participant system by the same system user always result in differently high series of measured values, creates the necessary conditions for the generation of session keys. Changing external conditions or influences can also contribute to this. The series of relative measured values, which are changing due to the relative measurement, in the physical authentication of subscriber systems and the biometric identification or verification of users always include in a session the measured values of the relevant, representative characteristics of the inherent structures of the test objects as a digital data set.

The sequence of the entire process can e.g. can be triggered by an external start impulse or alternatively by a short-term biometric positive test of the adapted test object etc. and then keep on hold for the duration of the process.

Instead, the process flow can also be made dependent on the fact that the biometric test specimen (finger) of the authorized, legal system user remains permanently on the adaptation surface of the biometric sensor during the entire process or the process flow is otherwise interrupted.

Insofar as the subscriber systems are designed autonomously and should remain freely available at any time as a transmitter and as a receiver for their legal users via Access Control, biometrics according to the sensor system 49 is mandatory, i.e. absolutely necessary. As a result, for example, it is implemented on the basis of the aforementioned CH patent applications. It is also used for the generation of code keys (keys) etc.

In another application, which differs from the exemplary embodiment described above, in addition to the autonomously designed subscriber systems with biometric access control described for the users, those are used which correspond to the former version in terms of technology and manipulation security, but because of the need for own access Control in consequence only in the function of an executing command recipient to be used. In contrast to the first-mentioned master subscriber systems, these are consequently referred to as slave subscriber systems. Master and slave systems are functionally compatible with each other. Since the slave subscriber systems in particular do not require biometric access control, the sensor 49 'is omitted.

In practical operation, slave subscriber systems are addressed wirelessly or via networking and are authenticated interactively in the same way as described in the first exemplary embodiment. In terms of security, the biometry of the master participant system plays a key role. In this, biometrics are generally retained.

The purpose of the session is the bug-proof and tamper-proof bidirectional transfer of e.g. Machine commands etc. on actuators, actuators, servo devices etc. For this purpose, the slave subscriber systems are completely sufficient and tamper-proof with a specific, unmistakably assigned subscriber address, e.g. a mobile subscriber number. In addition, with regard to their physical and structural identity, they are unique in a dynamic and sensory process during the session in the manner according to the invention and can be authenticated securely even without biometrics. Finally, a complex mathematical and session-specific verification between the two systems takes place during the session in interaction between the master and slave participant systems.

Last but not least, master and slave subscriber systems are particularly suitable for highly current, qualified and tamper-proof due to their flexible organization, telecommunications capability, miniaturizability etc. Systems of the entire locking technology, such as building automation including telecontrol technology, telemetry etc. With the same attractiveness they can also be used advantageously in the automotive sector and many other conventional as well as future applications, especially in the IT sector.

Claims

claims

1. A method for secure coding key exchange and data transmission between a sender and an addressee in a public data network, characterized in that for a first request from the sender, their identity, i.e. biometrically generated data that uniquely identifies the sender and authentication data of the subscriber system used, combined in a digital data record, are used as a provisional coding key, for the response of the addressee, the authentication data of his subscriber system are used as a provisional coding key and from the two provisional coding keys a transfer session key that can be shared for the encrypted data exchange is generated by combination.

2. The method according to claim 1, characterized in that for the response of the addressee, his biometrically generated data set, which uniquely identifies the addressee, is used together with the authentication data of his subscriber system as a provisional coding key.

A method according to claim 1, characterized in that in order to obtain the transfer session key at the combined preliminary coding keys mutations are carried out within the system.